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AMENDMENTS TO THE CLAIMS 

Listing Of The Claims: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

1.-6. (Canceled) 

7. (Currently Amended) A trusted element for use with a computer system 
including an insecure arrangement for using an application, the trusted element 
comprising: 

a decryptor that decrypts a credential associated with the application; 

a validator that validates at least one digital signature corresponding to the 

credential; 

a challenge generator that selects, based at least in part on the credential, 
at least one predetermined portion of the application, the predetermined portion of the 
application including at least some executable software code, and issues a challenge 
requesting a response from the insecure arrangement, the response providing a 
computation of at least one value based on the selected predetermined portion of the 
application; and 

a response checker that checks the response against the credential. 
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8. (Original) A trusted element as in claim 7, wherein the challenge 
generator randomly selects the predetermined portion from plural predetermined 
portions defined by the credential. 

9. (Previously Presented) A trusted element as in claim 7, wherein the 
challenge generator issues the challenge during execution of the application by the 
insecure arrangement. 

10. (Original) A trusted element as in claim 7, wherein the challenge 
generator issues the challenge to the application to compute the value. 

1 1 . (Original) A trusted element as in claim 7, wherein the challenge 
generator requests the application to compute a cryptographic hash of the selected 
portion. 

12. (Original) A trusted element as in claim 7, wherein the challenge 
generator selects a virtual path within the application. 

13. (Original) A trusted element as in claim 7, wherein the challenge 
generator selects a byte range within the application. 

14. -27. (Canceled) 
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28. (Currently amended) In an electronic appliance including a secure 

execution space and an insecure execution space, a method for permitting an 

application executing within the insecure execution space to request one or more 

services from a trusted element executing in the secure execution space, the method 

comprising: 

(a) issuing a challenge from the trusted element to the application or an 
agent of the application, the challenge being based at least in part on randomly selected 
parts of an authenticated credential, the challenge requesting the application or agent to 
provide one or more cryptographic hashes of one or more portions of the application^ 
the one or more portions of the application including at least some executable software 
code ; 

(b) sending, from the application or agent to the trusted element, said one 
or more cryptographic hashes of one or more portions of the application; 

(c) comparing, at the trusted element, information provided by the 
authenticated credential with said one or more cryptographic hashes of one or more 
portions of the application; and 

(d) denying the application access to said one or more services if the 
comparison fails. 



29. (Previously Presented) A method as in claim 28, in which steps (a)-(d) are 
performed multiple times during execution of the application. 
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30. (Previously Presented) A method as in claim 28, in which the 
authenticated credential is digitally signed. 

31 . (Previously Presented) A method as in claim 28, in which the 
authenticated credential is at least in part encrypted. 

32. (Previously Presented) A method as in claim 28, in which the one or more 
portions of the application include code. 

33. (Previously Presented) A method as in claim 28, in which at least one of 
the portions of the application overlaps another of the portions of the application. 

34. (Previously Presented) A method as in claim 28, in which at least one of 
the one or more portions of the application corresponds to a predetermined byte range 
or virtual path in the application. 

35. (Currently amended) A computer readable medium storing a computer 
program, the computer program including instructions that, when executed by a 
processor of an electronic appliance, are operable to cause the electronic appliance to 
take actions comprising: 

(a) issuing a challenge from a trusted element executing in a secure 
execution space to an application or agent executing in an insecure execution space, 
the challenge being based at least in part on randomly selected parts of an 
authenticated credential, the challenge requesting the application or agent to provide 
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one or more cryptographic hashes of one or more portions of the application , the one or 
more portions of the application including at least some executable software code ; 

(b) receiving, from the application or agent, said one or more 
cryptographic hashes of one or more portions of the application; 

(c) comparing information provided by the authenticated credential with 
said one or more cryptographic hashes of one or more portions of the application; and 

(d) denying the application access to one or more services provided by an 
application executing in the secure execution space if the comparison fails. 

36. (Previously Presented) A computer readable medium as in claim 35, in 
which the computer program is operable to cause the electronic appliance to perform 
actions (a)-(d) multiple times during execution of the application. 

37. (Previously Presented) A computer readable medium as in claim 35, in 
which the authenticated credential is digitally signed. 

38. (Previously Presented) A computer readable medium as in claim 35, in 
which the authenticated credential is at least in part encrypted. 

39. (Previously Presented) A computer readable medium as in claim 35, in 
which the one or more portions of the application include code. 
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40. (Previously Presented) A computer readable medium as in claim 35, in 
which at least one of the portions of the application overlaps another of the portions of 
the application. 

41 . (Previously Presented) A computer readable medium as in claim 35, in 
which at least one of the one or more portions of the application corresponds to a 
predetermined byte range or virtual path in the application. 

42. (Currently amended) An electronic appliance comprising: 
a secure execution space; 

an insecure execution space; and 

a trusted element operable to execute within the secure execution space, 
the trusted element being operable to: 

(a) issue a challenge to an application or agent executing in the insecure 
execution space, the challenge being based at least in part on randomly selected parts 
of an authenticated credential, the challenge requesting the application or agent to 
provide one or more cryptographic hashes of one or more portions of the application^. 
the one or more portions of the application including at least some executable software 
code ; 

(b) receive, from the application or agent, said one or more cryptographic 
hashes of one or more portions of the application; 

(c) compare information provided by the authenticated credential with 
said one or more cryptographic hashes of one or more portions of the application; and 
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(d) deny the application access to one or more services provided by an 
application executing in the secure execution space if the comparison fails. 

43. (Previously Presented) An electronic appliance as in claim 42, in which 
the secure execution space comprises a protected processing environment. 

44. (Previously Presented) An electronic appliance as in claim 42, in which 
the authenticated credential is digitally signed and at least in part encrypted. 

45. (Previously Presented) An electronic appliance as in claim 42, in which 
the one or more portions of the application include code. 

46. (Previously Presented) An electronic appliance as in claim 45, in which at 
least one of the portions of the application overlaps another of the portions of the 
application. 

47. (Previously Presented) An electronic appliance as in claim 46, in which at 
least one of the one or more portions of the application corresponds to a predetermined 
byte range or virtual path in the application. 
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